Offensive Security - Pen Test Senior

Division: CISO

Security is at the core of Euroclear’s services, embedded in every system and process across the organization. As part of the Chief Information Security Office (CISO), you will join the Offensive Security Tribe, a team dedicated to proactively identifying vulnerabilities and strengthening our cyber resilience.

This role focuses on penetration testing and remediation support, with opportunities to grow across a broad range of offensive security domains including red/purple team exercises, code analysis, and vulnerability management.

Your role

As a Penetration Testing Analyst, you will

• Prepare, execute, and deliver penetration tests for regulatory and project needs, primarily focused on applications but also covering infrastructure.
• Support remediation activities and retesting to validate fixes.
• Coordinate third-party testing engagements, including scoping, stakeholder alignment, and result dissemination.
• Maintain documentation and roadmaps for ongoing testing and remediation.
• Advise application owners and project leads on offensive security strategy and testing techniques.
• Contribute to the evolution of offensive security frameworks and processes.
• Represent the Offensive Security team in cross-functional testing discussions and act as a center of competence.
• Support Agile practices, reporting, and continuous improvement initiatives using automation and AI.

You’ll encounter the full spectrum of the attack chain—from web applications to binary exploitation and infrastructure—requiring a strong grasp of security policies and creative testing approaches.

Your profile

• Experience in penetration testing, ideally within a regulated environment.
• Familiarity with offensive security tools and techniques, including static/dynamic code analysis and vulnerability management.
• Strong understanding of application security principles, including OWASP Top 10 and common attack vectors (e.g., SQLi, XSS, DLL hijacking).
• Knowledge of security design principles (confidentiality, integrity, availability) and ISO27002 standards is a plus.
• Experience with remediation consulting and alternative testing methods is an advantage.
• Detail-oriented, analytical, and eager to learn.
• Strong communication skills and ability to collaborate across technical and business teams.

#LI-YK1